This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.mft File: S-1YvEVE5-O16XicZ8Y77JHCfN0.mft (raw, json) Hash identifier: b9nblSvtqA2gScKSbwxOAoBCDSzVzn4NUDQzh4hR2gI= Subject key identifier: A7:72:AB:6A:D7:08:C7:9B:5B:E5:00:6B:8B:E3:6B:42:07:9D:F2:0A Authority key identifier: 4B:ED:58:BC:45:44:E7:E3:B5:E9:78:9C:67:C6:3B:EC:91:C2:7C:DD Certificate issuer: /CN=A912994F/serialNumber=4BED58BC4544E7E3B5E9789C67C63BEC91C27CDD Certificate serial: 354A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-1YvEVE5-O16XicZ8Y77JHCfN0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.mft Manifest number: 3519 Signing time: Mon 22 Dec 2025 15:10:00 +0000 Manifest this update: Mon 22 Dec 2025 15:10:00 +0000 Manifest next update: Mon 29 Dec 2025 15:10:00 +0000 Files and hashes: 1: S-1YvEVE5-O16XicZ8Y77JHCfN0.crl (hash: yH+MnnWSfNqNqV2RLxqGLiQTEwghrxtNdrnmVY0xWr0=) 2: D257C8F88FAB11F0A7F64E1AC4F9AE02.roa (hash: hYZQfUT77wWm9wA8h4SPaexykIcEBdPcCnbabzBH2A4=) 3: E3D2704667FC11F0AC42A91FC4F9AE02.roa (hash: PqNSkqyewmKuXRkADPgSAahXx6Qh7/X+wfZVSlj+tc8=) 4: BAD49C82AA9611F098799D0CC4F9AE02.roa (hash: VLtfIYb4y+A0nG+DSlk1wkc4Va6Hh11pLowd8yB4WrU=) 5: 0188487C15AA11E685F66C3CC4F9AE02.roa (hash: XmZ8Xmav06mjCMLENRMHGPiJMlps0XR41qeutzh2QhM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.crl rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-1YvEVE5-O16XicZ8Y77JHCfN0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:09:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13642 (0x354a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912994F, serialNumber=4BED58BC4544E7E3B5E9789C67C63BEC91C27CDD Validity Not Before: Dec 22 15:10:00 2025 GMT Not After : Dec 29 15:10:00 2025 GMT Subject: CN=69495f48-9a1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2e:c8:ca:0a:71:d0:6c:a5:fe:6b:4e:1b:5a: f0:e5:a9:2b:8f:79:6b:2a:49:7c:36:62:d7:ad:5f: 24:8b:19:7c:4d:c6:a9:6e:d8:06:96:20:72:27:45: 40:29:d2:56:c2:75:c6:c9:39:93:de:46:7b:43:12: 26:09:1f:f0:c2:65:9d:55:8a:4f:24:e0:98:e4:4c: 7f:6b:dc:6f:0c:8e:c6:ca:61:d6:01:9c:5b:ee:d7: 01:f8:fa:a0:98:2a:d6:39:e7:76:69:24:ae:da:b0: 71:a4:0d:5e:6a:bd:73:69:71:59:80:2e:43:c2:c8: 2c:00:e6:11:ae:77:f6:f5:09:15:0e:0a:bc:de:69: 06:e1:aa:49:68:bb:ef:a2:3f:9a:b3:9f:c1:9a:85: b9:cf:2d:57:bf:04:e7:b7:b4:2f:92:14:3f:81:d0: 89:b3:cc:1d:e8:c1:8c:c5:d2:26:5d:60:1c:77:43: 37:ae:dd:e5:c9:79:9d:ed:d3:41:70:37:de:85:34: 71:f6:a4:81:59:ed:26:cc:26:8c:8c:61:68:45:ad: c9:17:68:1f:14:f3:de:2c:6e:d0:4f:41:d5:35:77: 2e:db:e8:94:89:a3:ea:b9:d2:c6:0f:3c:6b:76:3e: 37:72:3f:22:ad:09:b7:d7:5e:77:f0:a7:61:7f:d4: 91:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:72:AB:6A:D7:08:C7:9B:5B:E5:00:6B:8B:E3:6B:42:07:9D:F2:0A X509v3 Authority Key Identifier: keyid:4B:ED:58:BC:45:44:E7:E3:B5:E9:78:9C:67:C6:3B:EC:91:C2:7C:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-1YvEVE5-O16XicZ8Y77JHCfN0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:56:c2:87:66:bd:ee:80:7c:d8:3f:b0:a1:30:65:72:92:33: 7e:aa:f0:f2:1d:e4:bd:ed:d5:20:73:d1:1c:a7:ef:72:31:0a: c8:b1:d7:13:97:8c:20:69:f0:c7:ac:63:a0:88:63:1e:4e:c7: 5a:32:31:95:66:f0:95:fc:0a:dd:ee:72:91:42:6f:79:0c:32: 8c:51:d9:c0:62:1b:40:a0:0c:aa:c1:78:27:af:15:14:45:f2: 00:8d:b6:fe:fa:55:89:21:36:79:df:14:72:7a:6b:f7:c3:e5: ef:7b:78:0b:1e:4b:d7:c8:3b:3d:85:e1:a5:de:57:a8:08:e5: 90:d5:9f:b0:69:ff:a7:f7:ea:9a:36:ad:96:d3:a6:be:55:7e: 4d:c7:b8:5e:03:2e:0a:2b:f1:de:35:ee:35:ba:f6:ab:87:39: 4f:16:67:80:fd:48:95:50:87:e5:20:e5:68:0e:9a:3d:bb:8e: 36:ab:7f:e7:87:2d:a5:6e:c0:b8:55:46:ad:33:57:f0:c5:8c: 99:21:a9:7f:a1:45:41:9b:21:ed:56:d5:cd:08:5c:85:97:96: 13:58:05:f1:b0:f7:d0:0a:a8:66:9a:5b:8f:50:b2:ce:39:49: fd:66:2d:71:c1:4d:20:73:11:fe:c2:be:98:c4:0c:d1:e5:da: af:2d:33:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk5NEYxMTAvBgNVBAUTKDRCRUQ1OEJDNDU0NEU3RTNCNUU5Nzg5QzY3QzYzQkVD OTFDMjdDREQwHhcNMjUxMjIyMTUxMDAwWhcNMjUxMjI5MTUxMDAwWjAYMRYwFAYD VQQDDA02OTQ5NWY0OC05YTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvi7Iygpx0Gyl/mtOG1rw5akrj3lrKkl8NmLXrV8kixl8TcapbtgGliByJ0VA KdJWwnXGyTmT3kZ7QxImCR/wwmWdVYpPJOCY5Ex/a9xvDI7GymHWAZxb7tcB+Pqg mCrWOed2aSSu2rBxpA1ear1zaXFZgC5DwsgsAOYRrnf29QkVDgq83mkG4apJaLvv oj+as5/BmoW5zy1XvwTnt7QvkhQ/gdCJs8wd6MGMxdImXWAcd0M3rt3lyXmd7dNB cDfehTRx9qSBWe0mzCaMjGFoRa3JF2gfFPPeLG7QT0HVNXcu2+iUiaPqudLGDzxr dj43cj8irQm311538Kdhf9SR7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKdyq2rX CMebW+UAa4vja0IHnfIKMB8GA1UdIwQYMBaAFEvtWLxFROfjtel4nGfGO+yRwnzd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTk0Ri9BMDI5QTUyNjFE QUExMUUyOUJGQzY3QTYwOEIwMkNEMi9TLTFZdkVWRTUtTzE2WGljWjhZNzdKSENm TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MtMVl2RVZFNS1PMTZYaWNaOFk3N0pIQ2ZOMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTk0Ri9BMDI5QTUyNjFEQUExMUUyOUJGQzY3QTYwOEIwMkNEMi9TLTFZdkVWRTUt TzE2WGljWjhZNzdKSENmTjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALVsKHZr3ugHzYP7ChMGVykjN+qvDyHeS97dUgc9Ecp+9yMQrIsdcT l4wgafDHrGOgiGMeTsdaMjGVZvCV/Ard7nKRQm95DDKMUdnAYhtAoAyqwXgnrxUU RfIAjbb++lWJITZ53xRyemv3w+Xve3gLHkvXyDs9heGl3leoCOWQ1Z+waf+n9+qa Nq2W06a+VX5Nx7heAy4KK/HeNe41uvarhzlPFmeA/UiVUIflIOVoDpo9u442q3/n hy2lbsC4VUatM1fwxYyZIal/oUVBmyHtVtXNCFyFl5YTWAXxsPfQCqhmmluPULLO OUn9Zi1xwU0gcxH+wr6YxAzR5dqvLTP0 -----END CERTIFICATE-----Generated at Tue Dec 23 16:12:59 2025 by rpki-client